Remote opportunity at
Apollo.ioStaff Application Security Engineer
Apollo.io is seeking a Staff Application Security Engineer to helm application security planning and execution for its Security division. Founded in 2015, the platform serves revenue…
Career Tools
About This Role
Apollo.io is seeking a Staff Application Security Engineer to helm application security planning and execution for its Security division. Founded in 2015, the platform serves revenue teams worldwide by supplying verified B2B contact data and outreach automation tools. This position requires hands-on technical direction, strategic vision, and close collaboration with Product, Engineering, and Platform teams to tackle complex security challenges across modern architectures, AI features, and cloud environments. The person…
Job Description
Apollo.io is seeking a Staff Application Security Engineer to helm application security planning and execution for its Security division. Founded in 2015, the platform serves revenue teams worldwide by supplying verified B2B contact data and outreach automation tools. This position requires hands-on technical direction, strategic vision, and close collaboration with Product, Engineering, and Platform teams to tackle complex security challenges across modern architectures, AI features, and cloud environments.
The person in this role will establish security baselines, mentor senior engineers and security champions, conduct deep architectural reviews, and build secure-by-default components. Candidates will also lead artificial intelligence-driven application security workflows, engineer threat models, and resolve vulnerabilities across multiple codebases. This opportunity is suited for seasoned technical experts capable of making critical risk-related decisions and influencing cross-departmental roadmaps.
Responsibilities
- Manage the multi-year application security strategy and translate it into actionable cross-team initiatives
- Partner with Engineering, Product, Platform, and Data departments to ensure early security planning
- Establish secure design guidelines, code review criteria, and risk models for standard and AI-generated code
- Conduct threat modeling and security architecture reviews for large-scale, multi-team systems
- Design secure-by-default building blocks like shared authorization, secure token handling, and HTTP clients
- Oversee vulnerability management across bug bounties, internal reviews, and runtime findings
- Build automation and leverage artificial intelligence for code review, threat modeling, and remediation
- Define security protocols for AI systems, input-output handling, APIs, guardrails, and data-exfiltration paths
Requirements
- Over ten years of professional background in application security or software engineering
- Demonstrated history of guiding application security strategy across multiple engineering teams
- Expertise in code review, penetration testing, and exploit creation
- Software development proficiency capable of shipping production code
- Fundmentals in Linux and cloud operations
- Experience with secure architecture, authentication, and authorization frameworks
- Hands-on practice securing AI-enabled systems or internal agent features
Qualifications
- Background in Ruby and Ruby on Rails development
- Familiarity with Python
- Cloud infrastructure experience with GCP and Kubernetes
- Experience leading security for AI-native products or developer enablement programs
- Public security contributions including CVEs, research, public talks, open-source tools, or OSCP/OSWE certifications
Core Skills
Benefits
- Equity options
- Company bonus, sales commissions, or target bonuses
- 401(k) plan
- Minimum of ten paid holidays annually
- Flexible paid time off and parental leave
- Employee assistance program and wellbeing benefits
- Global travel coverage
- Life, AD&D, short-term disability, and long-term disability insurance
- Flexible spending account, health savings account, medical, dental, and vision coverage
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the location or remote policy for this role?
The posting indicates that the position is remote.
What is the salary range for the Staff Application Security Engineer position?
The total cash compensation range is USD 225,400 to 281,800 per year, which includes base salary and any applicable annual bonus.
What technical background is required?
Candidates need 10+ years in software engineering or application security, expert code review and penetration testing abilities, production coding skills, and hands-on experience securing AI-powered systems.
What employment type is this?
The job posting specifies full-time employment.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.